Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/P-3m5q4qPQ2SNeiAs_GOekqcfjs.roa
File: P-3m5q4qPQ2SNeiAs_GOekqcfjs.roa (raw, json)
Hash identifier: eKfLN+GcqqNwEJXEtNi5qdZ/kBOqEtfUu7tt1fh/R9c=
Subject key identifier: 3F:ED:E6:E6:AE:2A:3D:0D:92:35:E8:80:B3:F1:8E:7A:4A:9C:7E:3B
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019420D659C235402AAFE665D82281ED1DBC
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/P-3m5q4qPQ2SNeiAs_GOekqcfjs.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201383
IP address blocks: 84.47.184.0/24 maxlen: 24
84.47.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:59:c2:35:40:2a:af:e6:65:d8:22:81:ed:1d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fede6e6ae2a3d0d9235e880b3f18e7a4a9c7e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:a3:eb:f4:58:7a:4e:12:fa:6e:b9:5b:8e:
02:2f:77:3d:4f:45:8d:a5:77:17:a1:f4:51:1b:50:
26:3f:b7:0c:18:61:72:38:4b:1c:60:8e:e5:89:40:
c5:a4:1a:58:cc:31:88:a4:43:57:0c:92:d1:0c:a4:
ee:84:cf:20:11:a3:c1:92:b2:df:e4:34:75:3c:12:
5f:e2:8e:2d:2e:25:1b:52:47:c8:4a:10:58:69:22:
f1:9f:d2:7b:87:a7:f0:b7:08:69:88:bc:e7:91:21:
ed:69:a4:89:a0:85:23:df:5e:46:ab:82:28:9a:c4:
53:08:89:27:83:62:18:a7:a9:18:2c:54:1a:cf:11:
14:78:06:a6:9e:c8:19:9c:ad:03:f5:2c:2e:7c:48:
37:a6:ab:dc:ca:df:0a:fd:b9:51:e6:e9:87:fd:1e:
58:29:30:45:cc:ce:91:80:67:92:ef:29:22:16:27:
b4:14:c7:46:bb:ab:1a:77:e4:a3:6f:95:4a:f2:b4:
63:d8:8c:a8:09:ce:24:82:14:3b:ae:52:6c:a5:b1:
02:a8:d8:2e:55:8a:d1:e5:1e:31:cd:aa:bb:25:60:
72:07:db:1e:b7:7d:31:73:da:49:2f:4d:22:b7:7f:
b1:b7:32:68:c9:05:ae:b2:1b:eb:81:64:4b:7a:a3:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:E6:E6:AE:2A:3D:0D:92:35:E8:80:B3:F1:8E:7A:4A:9C:7E:3B
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/P-3m5q4qPQ2SNeiAs_GOekqcfjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.184.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:b0:d5:6e:54:b2:2b:32:20:ff:f3:19:12:58:05:34:a7:32:
e4:15:ff:cc:a9:7c:84:65:3e:80:55:fe:38:a2:a0:7a:85:d2:
3d:11:f1:48:a0:22:1a:35:f7:37:28:a5:5a:0c:1c:7f:5d:ef:
51:0e:e0:51:49:70:cb:e1:27:9f:8d:6d:2b:ee:86:fe:8e:99:
5f:68:ab:65:94:e6:40:59:3e:08:59:b9:32:2e:6d:05:41:bf:
4b:5e:7f:48:e6:74:a6:05:de:16:c5:3e:4f:3f:67:d6:e9:b2:
86:73:52:dd:ab:19:81:32:6d:bb:ab:f9:a4:c7:3f:0d:9d:cf:
d5:f1:26:c2:e1:a2:e0:bb:8a:52:26:c1:0f:08:22:2b:a9:d0:
1a:b3:4b:52:46:47:42:74:e1:99:5c:0e:81:49:75:5c:e8:80:
ea:90:c3:a4:34:51:82:73:83:c3:8b:cb:d5:e9:cd:fe:b5:b9:
80:54:be:5a:d9:62:91:63:b1:10:e5:46:70:ce:7a:c7:5d:08:
8d:a4:25:66:55:3f:c6:ba:5a:57:b2:88:ad:eb:9d:1b:9f:89:
85:d8:fc:bd:29:2a:90:82:cc:25:89:7b:1c:1b:60:16:4c:d3:
27:eb:be:21:2a:ac:35:47:bb:1f:39:8d:46:ef:4c:33:e8:b1:
3d:8b:b8:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1lnCNUAqr+Zl2CKB7R28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj
ODI3N2UwHhcNMjUwMTAxMDc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmVkZTZlNmFlMmEzZDBkOTIzNWU4ODBiM2YxOGU3YTRhOWM3ZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmICj6/RYek4S+m65W44CL3c9T0WN
pXcXofRRG1AmP7cMGGFyOEscYI7liUDFpBpYzDGIpENXDJLRDKTuhM8gEaPBkrLf
5DR1PBJf4o4tLiUbUkfIShBYaSLxn9J7h6fwtwhpiLznkSHtaaSJoIUj315Gq4Io
msRTCIkng2IYp6kYLFQazxEUeAamnsgZnK0D9SwufEg3pqvcyt8K/blR5umH/R5Y
KTBFzM6RgGeS7ykiFie0FMdGu6sad+Sjb5VK8rRj2IyoCc4kghQ7rlJspbECqNgu
VYrR5R4xzaq7JWByB9set30xc9pJL00it3+xtzJoyQWushvrgWRLeqMItwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD/t5uauKj0NkjXogLPxjnpKnH47MB8GA1UdIwQY
MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt
NDdlMDkzNzk4OWE4LzEvUC0zbTVxNHFQUTJTTmVpQXNfR09la3FjZmpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4
LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVC+4MA0G
CSqGSIb3DQEBCwUAA4IBAQB+sNVuVLIrMiD/8xkSWAU0pzLkFf/MqXyEZT6AVf44
oqB6hdI9EfFIoCIaNfc3KKVaDBx/Xe9RDuBRSXDL4SefjW0r7ob+jplfaKtllOZA
WT4IWbkyLm0FQb9LXn9I5nSmBd4WxT5PP2fW6bKGc1LdqxmBMm27q/mkxz8Nnc/V
8SbC4aLgu4pSJsEPCCIrqdAas0tSRkdCdOGZXA6BSXVc6IDqkMOkNFGCc4PDi8vV
6c3+tbmAVL5a2WKRY7EQ5UZwznrHXQiNpCVmVT/GulpXsoit650bn4mF2Py9KSqQ
gswliXscG2AWTNMn674hKqw1R7sfOY1G70wz6LE9i7gL
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:45 2025 by rpki-client